Part 2 Consent and Privacy Rule Authorization
42 CFR Part 2
Programs may not use or disclose any information about any patient unless the patient has consented in writing (on a form that meets the requirements established by the regulations) or unless another very limited exception specified in the regulations applies. Any disclosure must be limited to the information necessary to carry out the purpose of the disclosure.
The Privacy Rule The Privacy Rule
permits uses and disclosures for “treatment, payment and health care operations” as well as certain other disclosures without the individual’s prior written authorization. Disclosures not otherwise specifically permitted or required by the Privacy Rule must have an authorization that meets certain requirements. With certain exceptions, the Privacy Rule generally requires that uses and disclosures of PHI be the minimum necessary for the intended purpose of the use or disclosure. Substance abuse treatment programs most often make disclosures after a patient has signed a consent form that meets the requirements of 42 CFR §2.31. Note that a disclosure under Part 2 includes the acknowledgment that someone has applied to or is enrolled in the program, and thus is only permitted if the patient has signed a consent form (or another of the regulations’ narrow exceptions applies). See 42 CFR §§2.11 and 2.13.
A Part 2 consent form must include the following elements:
- Name or general designation of the program or person permitted to make the disclosure;
- Name or title of the individual or name of the organization to which disclosure is to be made;
- Name of the patient;
- Purpose of the disclosure;
- How much and what kind of information is to be disclosed;
- Signature of patient (and, in some States, a parent or guardian);
- Date on which consent is signed;
- Statement that the consent is subject to revocation at any time except to the extent that the program has already acted on it; and
- Date, event, or condition upon which consent will expire if not previously revoked.
Collection of your Personal Information
In order to better provide you with services offered on our Site, Hill Recovery may collect personally identifiable information, such as your:
- First and Last Name
- Mailing Address
- Phone Number
- Job Title
- Phone Number
- Health Condition(s), Insurance Provider, and Additional Health Information Covered by HIPAA
Hill Recovery may also collect anonymous demographic information, which is not unique to you, such as your:
We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services available on the Site. These may include: (a) sending us an email message; (b) submitting your credit card or other payment information paying for services on our Site. We will use your information for, but not limited to, communicating with you in relation to services you have requested from us. We also may gather additional personal or non-personal information in the future.
Use of your Personal Information
Hill Recovery collects and uses your personal information to operate its website(s) and deliver the services you have requested.
Hill Recovery may also use your personally identifiable information to inform you of other products or services available from Hill Recovery and its affiliates.
Sharing Information with Third Parties
Hill Recovery does not sell, rent or lease its customer lists to third parties.
Hill Recovery may share data with trusted partners to help perform statistical analysis, send you email or postal mail, and to provide customer support. All such third parties are prohibited from using your personal information except to provide these services to Hill Recovery, and they are required to maintain the confidentiality of your information.
Hill Recovery may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on Hill Recovery or the site; (b) protect and defend the rights or property of Hill Recovery; and/or (c) act under exigent circumstances to protect the personal safety of users of Hill Recovery, or the public.
Tracking User Behavior
Hill Recovery may keep track of the websites and pages our users visit within Hill Recovery, in order to determine what Hill Recovery services are the most popular. This data is used to deliver customized content and advertising within Hill Recovery to customers whose behavior indicates that they are interested in a particular subject area.
Automatically Collected Information
Information about your computer hardware and software may be automatically collected by Hill Recovery. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the Hill Recovery website.
This website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.
Security of your Personal Information
Hill Recovery secures your personal information from unauthorized access, use, or disclosure. Hill Recovery uses the following methods for this purpose:
- SSL Protocol
- HIPAA Compliant Contact Forms Provided By Jotform
When personal information (such as a credit card number) is transmitted to other websites, it is protected through the use of encryption, such as the Secure Sockets Layer (SSL) protocol.
We strive to take appropriate security measures to protect against unauthorized access to or alteration of your personal information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet which are beyond our control; and (b) security, integrity, and privacy of any and all information and data exchanged between you and us through this Site cannot be guaranteed.
Right to Deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
- Delete your personal information from our records; and
- Direct any service providers to delete your personal information from their records.
Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:
- Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
- Debug to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act;
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
- Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
- Comply with an existing legal obligation; or
- Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Children Under Thirteen
Hill Recovery collects personally identifiable information from children under the age of thirteen. Hill Recovery collects this information for the following reason(s): Information often provided by parents of minors in need of the services provided by Hill Alcohol and Drug treatment..
If you are under the age of thirteen, you must ask your parent or guardian for permission to use this website. If you are a parent and you have questions regarding our data collection practices, please contact us using the information provided at the end of this Statement of Privacy.
From time to time, Hill Recovery may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. In order to improve our Services, we may receive a notification when you open an email from Hill Recovery or click on a link therein.
If you would like to stop receiving marketing or promotional communications via email from Hill Recovery, you may opt out of such communications by clicking the unsubscribe link at the bottom of the email sent by Hill Alcohol and Drug Treatment.
Changes to this Statement
Hill Recovery welcomes your questions or comments regarding this Statement of Privacy. If you believe that Hill Recovery has not adhered to this Statement, please contact Hill Recovery at:
Hill Alcohol & Drug Treatment
Address: 41877 Enterprise Cir N #100 Temecula, California 92590
Effective: August 01, 2020